chore(deps): bump psycopg2-binary from 2.9.9 to 2.9.12 in /scraper by dependabot[bot] · Pull Request #37 · blixten85/scraper

dependabot · 2026-04-25T07:12:17Z

Bumps psycopg2-binary from 2.9.9 to 2.9.12.

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

... (truncated)

Commits

3a6d9d6 ci: include almalinux in whieel building
ebca6bf chore: bump to version 3.9.12
0196f02 build(deps): bump pypa/cibuildwheel from 3.3.1 to 3.4.0
d157bdc build(deps): bump docker/setup-qemu-action from 3 to 4
7fccc0f build(deps): bump actions/upload-artifact from 6 to 7
d52a61e chore: bump dependency libraries
b231d72 chore: fix building binary images
6d76e84 Merge pull request #1836 from psycopg/fix-1835
f7e314c fix: overflow in malformed interval
eb905c1 docs: replace bare except clause with except Exception
Additional commits viewable in compare view

Summary by CodeRabbit

Release Notes

Chores
- Updated database adapter dependency to a newer stable version for improved stability and compatibility.

dependabot · 2026-04-25T07:12:18Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

codacy-production

Pull Request Overview

This PR updates the psycopg2-binary dependency to version 2.9.12, which includes critical bug fixes and support for newer Python versions. The project is currently meeting quality standards; however, the update introduces a potential breaking change by dropping support for Python 3.7 and 3.8. No security or logic flaws were identified in the metadata provided, but validation of the runtime environment is required before merging.

About this PR

Potential breaking change: psycopg2-binary version 2.9.10+ no longer supports Python 3.7 and 3.8. Ensure the scraper's execution environment is running Python 3.9 or newer to avoid runtime failures.

Test suggestions

Verify that the application successfully connects to the PostgreSQL database using the updated psycopg2-binary 2.9.12 driver.
Confirm that the execution environment is running Python 3.9 or newer, as support for 3.7 and 3.8 was dropped in versions 2.9.10 and 2.9.11.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that the application successfully connects to the PostgreSQL database using the updated psycopg2-binary 2.9.12 driver.
2. Confirm that the execution environment is running Python 3.9 or newer, as support for 3.7 and 3.8 was dropped in versions 2.9.10 and 2.9.11.

_{TIP Improve review quality by adding custom instructions}
_{TIP How was this review? Give us feedback}

codacy-production · 2026-04-25T10:35:17Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

blixten85 · 2026-04-25T10:42:54Z

@dependabot rebase

dependabot · 2026-04-25T10:42:57Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

blixten85 · 2026-04-25T10:45:19Z

@dependabot recreate

Bumps [psycopg2-binary](https://github.com/psycopg/psycopg2) from 2.9.9 to 2.9.12. - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.9...2.9.12) --- updated-dependencies: - dependency-name: psycopg2-binary dependency-version: 2.9.12 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-04-25T10:53:30Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: f9eb68bb-3103-4656-9d36-8a6b591c7e1d

📥 Commits

Reviewing files that changed from the base of the PR and between 032f4df and 34b26d7.

📒 Files selected for processing (1)

scraper/requirements.txt

📝 Walkthrough

Walkthrough

The psycopg2-binary dependency in scraper/requirements.txt was updated from version 2.9.9 to 2.9.12. This is a maintenance update to the PostgreSQL database adapter library.

Changes

Cohort / File(s)	Summary
Dependency Version Update `scraper/requirements.txt`	Bumped `psycopg2-binary` from 2.9.9 to 2.9.12.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 A version hop, a small delight,
From 2.9.9 to 2.9.12 so bright!
PostgreSQL's adapter takes a leap,
While code and database safely keep,
This gentle bump, a maintenance treat! 🌿

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: a dependency bump of psycopg2-binary from 2.9.9 to 2.9.12 in the /scraper directory, matching the changeset exactly.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/pip/scraper/psycopg2-binary-2.9.12

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Replace partial SQL string concatenation with a static lookup table of four fully-prewritten queries keyed on (include_drops, has_site_name). No user input ever touches the SQL string itself; site_name is still passed as a parameterized %s value. Fixes CodeQL alert py/sql-injection (alert #37). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

…ggle (#103) * feat: subcategory auto-discovery, fyndhörna filter, CSV price drop toggle - Revert URL input from textarea back to single field — subcategory pagination now handles category discovery automatically - Add "Auto-discover subcategories" checkbox to add form; inet.se/komplett/ webhallen templates default to subcategory mode with pagination_selector - Add exclude_link_pattern per config: product URLs containing the pattern are silently skipped (inet.se template defaults to /produkt/x to exclude open-box fyndhörna items that caused false -50% drop readings) - Fix urljoin in extract_product: use page.url instead of config base_url (base_url may contain multiple lines after multi-URL feature) - CSV export: add include_drops query param; when enabled adds Was/Drop% columns using price_history; UI shows "Price drops" toggle next to Export Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: eliminate SQL injection vector in export query builder Replace partial SQL string concatenation with a static lookup table of four fully-prewritten queries keyed on (include_drops, has_site_name). No user input ever touches the SQL string itself; site_name is still passed as a parameterized %s value. Fixes CodeQL alert py/sql-injection (alert #37). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: add pagination_selector field for custom subcategory configs Previously the pagination_selector was silently set to '' for any site not matching a known template name, making subcategory auto-discovery non-functional for custom sites. - Show/hide 'Category link selector' input when subcategory checkbox is toggled - loadTemplate populates the field from the template definition - addConfig reads directly from the input instead of template lookup - Move csv/StringIO/Response imports to top-level (style fix) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: decouple site_name from SQL query selection to satisfy CodeQL site_name (URL param) no longer influences which query is selected — export_site_csv always uses the site-specific variant keyed on (include_drops, True), while export_all_csv uses (include_drops, False). site_name only appears in the parameterized tuple passed to cur.execute. Removes _build_export_query helper (no longer needed). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Anders Eriksson <blixten85@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

dependabot Bot added the auto-merge label Apr 25, 2026

github-actions Bot enabled auto-merge (squash) April 25, 2026 07:12

github-actions Bot added scraper dependencies labels Apr 25, 2026

codacy-production Bot reviewed Apr 25, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/pip/scraper/psycopg2-binary-2.9.12 branch from 9793720 to 34b26d7 Compare April 25, 2026 10:53

coderabbitai Bot approved these changes Apr 25, 2026

View reviewed changes

blixten85 merged commit f481d0d into main Apr 25, 2026
6 of 7 checks passed

blixten85 deleted the dependabot/pip/scraper/psycopg2-binary-2.9.12 branch April 25, 2026 11:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump psycopg2-binary from 2.9.9 to 2.9.12 in /scraper#37

chore(deps): bump psycopg2-binary from 2.9.9 to 2.9.12 in /scraper#37
blixten85 merged 1 commit intomainfrom
dependabot/pip/scraper/psycopg2-binary-2.9.12

dependabot Bot commented on behalf of github Apr 25, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 25, 2026

Uh oh!

codacy-production Bot left a comment

Uh oh!

codacy-production Bot commented Apr 25, 2026 •

edited

Loading

Uh oh!

blixten85 commented Apr 25, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 25, 2026

Uh oh!

blixten85 commented Apr 25, 2026

Uh oh!

coderabbitai Bot commented Apr 25, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Poem

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 25, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Current release

Summary by CodeRabbit

Release Notes

Uh oh!

dependabot Bot commented on behalf of github Apr 25, 2026

Labels

Uh oh!

codacy-production Bot left a comment

Choose a reason for hiding this comment

Pull Request Overview

About this PR

Test suggestions

Uh oh!

codacy-production Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Up to standards ✅

Uh oh!

blixten85 commented Apr 25, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 25, 2026

Uh oh!

blixten85 commented Apr 25, 2026

Uh oh!

coderabbitai Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Poem

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 25, 2026 •

edited by coderabbitai Bot

Loading

codacy-production Bot commented Apr 25, 2026 •

edited

Loading

coderabbitai Bot commented Apr 25, 2026 •

edited

Loading